---
# SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
# SPDX-License-Identifier: Apache-2.0
title: "Tutorials"
slug: "get-started/tutorials"
description: "Step-by-step walkthroughs for OpenShell, from first sandbox to production-ready policies."
keywords: "Generative AI, Cybersecurity, Tutorial, Sandbox, Policy"
position: 1
---

Hands-on walkthroughs that teach OpenShell concepts by building real configurations. Each tutorial builds on the previous one, starting with core sandbox mechanics and progressing to production workflows.

<Cards>

<Card title="First Network Policy" href="/get-started/tutorials/first-network-policy">

Create a sandbox, observe default-deny networking, apply a read-only L7 policy, and inspect audit logs. No AI agent required.
</Card>

<Card title="GitHub Push Access" href="/get-started/tutorials/github-sandbox">

Launch Claude Code in a sandbox, diagnose a policy denial, and iterate on a custom GitHub policy from outside the sandbox.
</Card>

<Card title="Microsoft Graph Provider Refresh" href="/get-started/tutorials/microsoft-graph-provider-refresh">

Configure a Microsoft Graph provider profile with gateway-managed OAuth2 refresh-token rotation.
</Card>

<Card title="Inference with Ollama" href="/get-started/tutorials/inference-ollama">

Run Ollama models in a community sandbox or attach a profile for a host-level service.
</Card>

<Card title="Local Inference with LM Studio" href="/get-started/tutorials/local-inference-lmstudio">

Attach an endpoint-bearing profile and call a local LM Studio server directly.
</Card>

<Card title="Docker Compose Setup" href="/get-started/tutorials/docker-compose">

Run the OpenShell gateway as a Docker Compose service and create agent sandboxes including OpenClaw.
</Card>

</Cards>